Chenhg5 Cc-Connect
3 CVEs affecting Chenhg5 Cc-Connect. Latest disclosed: 2026-09-16. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-92801 | High | 8.8 | 2026-09-16 | cc-connect through 1.5.0 fails to enforce per-user allowlist filtering in the onCardAction handler for Feishu interactive card callbacks. Attackers can dispatc… |
CVE-2026-76761 | High | 7.3 | 2026-08-19 | A vulnerability was identified in chenhg5 cc-connect up to 1.4.1. This affects the function shellExecCommand of the file core/engine.go of the component Manage… |
CVE-2026-76760 | High | 7.3 | 2026-08-19 | A vulnerability was found in chenhg5 cc-connect up to 1.4.1. Affected by this vulnerability is the function Authenticate of the file core/webhook.go. The manip… |